Legal

Privacy Policy

Last updated: July 5, 2026

1. Introduction

FlowMindLabs AI ("we", "us", "our") operates the FlowMindLabs AI platform (the "Service"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Service. We are committed to protecting your privacy and being transparent about our data practices. By using FlowMindLabs AI, you agree to the practices described in this policy.

2. Information We Collect

We collect information you provide directly to us, such as your name, email address, and company when you create an account. We also collect information automatically, including usage data, IP address, browser type, and device information. When you connect third-party integrations, we may receive data from those services as needed to run your workflows. Payment information is processed by our payment provider (Stripe) and is not stored on our servers.

3. How We Use Your Information

We use your information to provide, maintain, and improve the Service; to authenticate your account; to process transactions and send related notices; to respond to your support requests; to monitor and analyze trends, usage, and activities; to detect, investigate, and prevent fraudulent transactions and other illegal activities; and to communicate with you about product updates, news, and promotional materials (which you can opt out of at any time).

4. AI Processing

When you use AI-powered features, your inputs and outputs are processed by our AI providers (including OpenRouter, Google Gemini, and HuggingFace). We do not use your data to train AI models. Your inputs and outputs are private to your workspace. On Enterprise plans, we offer zero-retention modes with our providers. Workflow execution data is retained for the period specified in your plan so you can review run logs and audit history.

5. Data Sharing

We do not sell your personal information. We share data only with service providers who help us operate the Service (such as hosting, analytics, and email delivery), with AI providers as needed to execute your workflows, with payment processors for billing, and when required by law or to protect our rights. All third-party providers are bound by written agreements requiring them to protect your data consistent with this policy.

6. Data Retention

We retain your data for as long as your account is active or as needed to provide the Service. Workflow run logs are retained based on your plan: 7 days on Free, 90 days on Pro, and unlimited on Enterprise. You can request deletion of your data at any time. When you close your account, we delete or anonymize your personal information within 30 days, except where retention is required by law.

7. Data Security

We protect your data with end-to-end encryption in transit (TLS 1.2+) and at rest (AES-256). We are SOC 2 Type II certified and maintain granular access controls, audit logs, and 24/7 monitoring. Access to production data is restricted to authorized personnel with a documented business need and is reviewed quarterly.

8. Your Rights

Depending on your location, you may have the right to access, correct, export, or delete your personal information; to object to or restrict certain processing; and to withdraw consent. You can exercise these rights from your account settings or by contacting us at privacy@flowmindlabs.ai. We respond to verified requests within 30 days.

9. International Data Transfers

FlowMindLabs AI operates globally and your data may be processed in countries other than your own. We use Standard Contractual Clauses and other appropriate safeguards to ensure your data is protected consistent with this policy wherever it is processed. Enterprise customers can select data residency in the US, EU, or APAC regions.

10. Children's Privacy

The Service is not intended for children under 16. We do not knowingly collect personal information from children under 16. If you believe we have collected such information, please contact us and we will promptly delete it.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by email or by posting a notice in the Service at least 30 days before the change takes effect. We encourage you to review this policy periodically.

12. Contact Us

If you have any questions about this Privacy Policy, please contact us at privacy@flowmindlabs.ai or by mail at: FlowMindLabs AI, Attn: Privacy, [Company Address]. Our EU Data Protection Officer can be reached at dpo@flowmindlabs.ai.